
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier: pKwgU0Lf7Tu6k87+TublehaN2UNpKosgZGJ345oLJG8=
Subject key identifier: 1D:70:BD:BD:5C:56:D6:DD:7C:21:B4:77:5D:8D:7D:FF:AB:9A:35:A0
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 04BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number: 048F
Signing time: Tue 24 Mar 2026 23:44:40 +0000
Manifest this update: Tue 24 Mar 2026 23:44:40 +0000
Manifest next update: Tue 31 Mar 2026 23:44:40 +0000
Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: I/bKOMNWgpii4CFv8G7tFWtSBynF98bQVDlMowpBkc4=)
2: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: S6UO53MXAkAi+XLBiT9Ln1x4LjRW6kd51aANFG8YBFk=)
3: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: oNX+Dnew/zckK6oBy/770AXwcXEQ5pdbx9pn0hotFzw=)
4: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: bDJngbRqQQCeqynfoF49Nc3jY+pVnbbMtAnX90tGxgk=)
5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: bKF8Rh3YnKlaw/DYfv4LrA49RsP4M5SZ6RHzdBORNEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: Mar 24 23:44:40 2026 GMT
Not After : Mar 31 23:44:40 2026 GMT
Subject: CN=69c321e8-fa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:c1:6a:36:60:eb:4e:61:c0:45:3d:cf:7e:
b2:ad:bc:c5:bb:a3:98:bb:32:d2:58:35:50:72:cd:
cc:15:04:23:27:33:5e:58:d1:0d:cd:70:83:4b:2c:
46:eb:26:b8:b1:aa:46:d6:f0:14:14:6a:e0:cf:8d:
42:46:92:67:1a:8d:cb:21:c9:2c:36:29:b0:0d:f4:
d3:10:1f:7b:15:fc:cb:76:c5:c7:50:5e:e4:5b:ea:
89:d5:4f:b1:e7:84:94:0b:95:40:fd:11:88:2b:a5:
83:85:48:b7:aa:29:14:5e:41:c6:13:b5:49:50:87:
2d:67:8c:9f:34:e9:b4:d3:47:62:ed:ca:f9:07:fb:
9a:05:45:51:39:1e:b4:8b:82:6a:f4:37:72:77:9d:
63:4f:f6:f6:2b:82:52:97:1c:23:a2:2c:0e:b2:11:
2d:3f:41:48:c8:35:40:d8:8d:6b:7d:62:40:76:42:
f5:5d:00:fd:e4:34:52:ed:b6:97:a3:19:3a:be:2c:
ff:5f:75:8d:5c:14:d3:4d:6c:d0:4c:f2:28:f8:90:
42:af:28:5c:c1:d7:00:a7:eb:a4:12:40:bb:0c:9e:
6b:d3:87:c6:c6:cb:2c:94:7c:88:42:e9:35:3a:0e:
dd:af:96:21:42:ff:9b:54:07:c4:94:10:7f:2b:e3:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:70:BD:BD:5C:56:D6:DD:7C:21:B4:77:5D:8D:7D:FF:AB:9A:35:A0
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:5d:bc:2b:d5:c7:17:93:77:d4:0d:7a:5d:b7:47:cf:13:
04:0a:49:35:13:9a:cc:27:b2:47:2c:75:67:8d:68:48:11:9e:
ba:41:0d:f8:7a:d9:d5:98:99:79:a1:38:ef:64:de:6a:87:21:
cf:22:a3:d2:b0:4a:36:8e:d9:41:3a:23:8d:2b:c8:77:df:01:
dc:6a:d2:ff:d8:a4:4c:76:50:9a:de:67:a5:12:83:eb:eb:5e:
59:d5:3e:a0:5c:11:0e:c2:45:b5:1a:86:b4:56:6a:51:75:9c:
c1:ad:89:61:2e:15:2d:95:cf:d8:bf:ab:2c:32:42:07:90:dd:
7e:c7:d1:01:ae:20:1c:43:33:43:25:fc:78:4d:b5:87:fa:8e:
4e:28:25:96:09:c4:4e:7e:ed:d4:db:61:5a:ac:15:21:8e:94:
5f:f7:71:f4:01:01:ce:15:89:40:93:ba:e2:b1:01:7b:20:cf:
7e:1a:b3:f3:37:99:ef:d7:70:34:51:3c:fc:7e:e9:e2:ec:d1:
cf:d9:df:c1:f9:5d:cb:c1:d6:5c:fb:16:a9:4c:89:62:9d:b9:
6e:89:f0:52:68:31:57:a6:90:b2:c9:ed:aa:63:26:fa:da:c0:
db:cb:2a:28:b8:51:1b:ab:79:61:34:6d:37:8d:1e:d9:f4:4e:
5a:81:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:52 2026 by rpki-client